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IN THE CLAIMS: 

The text of all pending claims, (including withdrawn claims) is set forth below. Cancelled 
and not entered claims are indicated with claim number and status only. The claims as listed 
below show added text with underlining and deleted text with str i k e through . The status of each 
claim is indicated with one of (original), (currently amended), (cancelled), (withdrawn), (new), 
(previously presented), or (not entered). 

1-3. (Cancelled) 

4. (Previously presented) An encryption device comprising XOR means and 
nonlinear transform means, said encryption device further comprising: 

a random number generator for generating a random number h, where h is an integer 
between zero and q-1 ; 

q sets of fixed values, where q is an integer equal to three or more, wherein equations, 
FM j>h = C h XOR L1 i(L2i-1 (Dh)) for £1 , C h = c hfl5 c hl i4 - ■ ■ c h ,o, and D h = d h|15 d h) i4. ■ ■ d h ,o, where i is 
an integer and j is an integer, 

q sets of fixed values, wherein equations, (c 0 j XOR c 1tj ) = (01 01... 01 ) 2 or (1010...10) 2 and 
(d 0 j XOR d 1( j) = (0101.. .01) 2 or (1010.. .10) 2 are satisfied, a fixed table before masking is defined 
as S[x], and i-th masked fixed table is defined as Sj[x XOR c ifJ ] XOR djj for the j-th fixed value; 

linear transform means L1j(x) and linear transform means L2j(x), wherein the linear 
transform means L1j(x), the nonlinear transform means with the masked fixed table Sj [x] and the 
linear transform means L2j(x) operate in i-th one of rounds; and 

a first selector for selecting one fixed value of the h-th set of said q sets of fixed values of 
said q sets of fixed tables in response to the random number h, 

said XOR means XORing an input thereto with an XOR of a key with said selected fixed 

value.. 

5-7. (Cancelled) 

8. (Previously presented) An encryption device comprising XOR means and 
nonlinear transform means, said encryption device further comprising: 

a random number generator for generating a random number h, where h is an integer 
between zero and q-1 ; 

q sets of fixed values, where q is an integer equal to three or more, wherein equations, 
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FM 0 ,h = C h XOR L1 0 (FMin), C h = c ht15 c M ...c hl o, and D h = d h(15 dh,i4...dh,o, are satisfied, where 
FM j h is the i-th fixed value of the h-th set of said q sets of fixed values, where i is an integer and j 
is an integer, 

q sets of fixed values, wherein equations, (c 0 ,j XOR c 1(j ) v (c 1tj XOR c 2 ,j) v...v (cq- 2 j XOR 
cq- 1ti ) = (111 ... 11) 2 and (d 0J XOR d 1(j ) v (d 1tj XOR d 2J ) v...v (dq- 2(j XOR dq-ij) = (111 ... 11) 2 are 
satisfied, a fixed table before masking is defined as S[x], and i-th masked fixed table is defined 
as Sj[x XOR Cjj] XOR d ifj for the j-th fixed value; 

linear transform means L1j(x) and linear transform means L2j(x), wherein the linear 
transform means L1j(x), the nonlinear transform means with the masked fixed table Sj [x] and the 
linear transform means L2j(x) operate in i-th one of rounds; and 

a first selector for selecting one fixed value of the h-th set of said q sets of fixed values in 
response to the random number h, 

said XOR means XORing an input thereto with an XOR of a key with said selected fixed 

value 

9. (Previously presented) The encryption device according to claim 4, said 
nonlinear transform means being Subbyte means; 

the linear transform means L1j(x) comprising means for shifting an input, and the linear 
transform means L2j(x) comprising means for mixedcolumning an input. 

10-31. (Cancelled) 

32. (Previously presented) The encryption device according to claim 4, characterized 
in that the linear transform means L1j(x) is defined as L1i(x) = x. 

33. (Previously presented) The encryption device according to claim 4, characterized 
in that the linear transform means L2j(x) is defined as L2j(x) = MixedColumn(Shift(x)). 

34. (Previously presented) The encryption device according to claim 4, characterized 
in that the linear transform means L2j(x) is defined as Shift(x) 

35. (Previously presented) The encryption device according to claim 8, characterized 
in that the linear transform means L1j(x) is defined as L1j(x) = x. 

36. (Previously presented) The encryption device according to claim 8, characterized 
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in that the linear transform means L2j(x) is defined as L2j(x) 
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= MixedColumn(Shift(x)). 



37. (Previously presented) The encryption device according to claim 8, characterized 
in that the linear transform means L2j(x) is defined as Shift(x) 

38. (Previously presented) An encryption device comprising XOR means and 
nonlinear transform means, said encryption device further comprising: 

a random number generator for generating a random number h, where h is an integer 
between zero and q-1 ; 

q sets of fixed values, where q is an integer three or more, wherein equations, FM i h = C h 
XOR L1i(L2i-1(Dh)) for C h = c M 5Ch,i4...c hi0 , and D h = d ht15 d h(14 ...dh,o, are satisfied, where i 
is an integer and j is an integer, 

q sets of fixed values, where equations, (c 0 j XOR Cij)v(c 1fj XOR c 2J )v... v(cq- 2J XOR cq- 
1fj ) = (1111.. .11) 2 and (d 0 j XOR d 1J )v(d 1ij XOR d 2J )v ...v(dq- 2 j XOR dq-ij) = (1111.-11)2, are 
satisfied, and a fixed table before masking is defined as S[x] and an i-th masked fixed table is 
defined as Sj[x XOR chj] XOR dhj for the j-th fixed value; 

linear transform means L1j(x) and linear transform means L2j(x), wherein the linear 
transform means L1i(x), the nonlinear transform means with the masked fixed table Sj [x] and the 
linear transform means L2j(x) operate in i-th one of rounds; and 

a first selector for selecting one fixed value of the h-th set of said q sets of fixed values in 
response to the random number h; 

said XOR means XORing an input thereto with an XOR of a key with said selected fixed 

value. 

39. (Previously presented) The encryption device according to claim 38, 
characterized in that the linear transform means L1|(x) is defined as L1 s (x) = x. 

40. (Previously presented) The encryption device according to claim 38, 
characterized in that the linear transform means L2j(x) is defined as L2j(x) = 
MixedColumn(Shift(x)). 

41 . (Previously presented) The encryption device according to claim 38, 
characterized in that the linear transform means L2j(x) is defined as Shift(x). 

42-49. (Cancelled) 
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50. (Previously presented) An encryption device comprising XOR means and 
nonlinear transform means, said encryption device further comprising: 

a random number generator for generating a random number h, where h is an integer 
between zero and q-1 ; 

q sets of masked fixed values and q sets of fixed tables, where q is an integer equal to 
three or more, wherein equations, FM 0 ,h = C h XOR L1 0 (FMin), C h = Ch,i5Ch,i...c hl o, and D h = d 
h15 d h,i4...d h,o, are satisfied, where FM i h is the i-th fixed value of the h-th set of said q sets of 
fixed values, where i is an integer and j is an integer, 

q sets of fixed values, wherein equations, (c 0 ,j XOR c 1(j ) v (c 1tj XOR c 2 j) v...v (cq- 2J XOR 
cq-ij) = (111 ...11) 2 and (d 0J XOR d^) v (d 1tj XOR d 2J ) v...v (dq- 2j XOR dq-u) = (111 ... 11) 2 are 
satisfied, a fixed table before masking is defined as S[x], and i-th masked fixed table is defined 
as Sj[x XOR CjJ XOR dy for the j-th fixed value; 

a selector for selecting one of said q sets of fixed tables in response to the random 
number h, 

said nonlinear transform means nonlinearly transforming an input thereto in accordance 
with said selected set of fixed tables; and 

a plurality of encrypting rounds, wherein i-th one of said plurality of encrypting rounds 
comprises the XOR means, the fixed tables, the selector, linear transform means L1 s (x) and 
linear transform means L2j(x), for that round, and wherein the fixed tables for said plurality of 
respective encrypting rounds are identical, and wherein the linear transform means L1j(x), the 
nonlinear transform means with the masked fixed table Sj [x] and the linear transform means 
L2j(x) operate in that round. 

51 . (Previously presented) The encryption device according to claim 50, 
characterized in that the linear transform means L1j(x) is defined as L1j(x) = x. 

52. (Previously presented) The encryption device according to claim 50, 
characterized in that the linear transform means L2j(x) is defined as L2j(x) = 
MixedCoiumn(Shift(x)). 

53. (Previously presented) The encryption device according to claim 50, 
characterized in that the linear transform means L2j(x) is defined as Shift(x). 

54. (Previously presented) An encryption device comprising XOR means and 
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nonlinear transform means, said encryption device further comprising: 

a random number generator for generating a random number h, where h is an integer 
between zero and q-1 ; 

q sets of masked fixed values and q sets of fixed tables, where q is an integer equal to 
three or more, wherein equations, FM l h = C h XOR L1 i(L2i-1 (Dh)) for i^1 , C h = c h ,i5C h.u- . . c h ,o, 
and D h = d hf15 d n.-u—d h ,o, are satisfied, where FM j|h is the i-th fixed value of the h-th set of said q 
sets of fixed values, where i is an integer and j is an integer, 

q sets of fixed values, wherein equations, (c 0 j XOR c 1tj ) v (c 1t j XOR c 2| j) v...v (cq- 2 j XOR 
cq-u) = (111 ... 11) 2 and (d 0J XOR d 1tj ) v (d 1(j XOR d 2j ) v...v (dq- 2J XOR dq-ij) = (111 ... 11) 2 are 
satisfied, a fixed table before masking is defined as S[x], and i-th masked fixed table is defined 
as Sj[x XOR Qj] XOR d u for the j-th fixed value; 

a selector for selecting one of said q sets of fixed tables in response to the random 
number h, 

said nonlinear transform means nonlinearty transforming an input thereto in accordance 
with said selected set of fixed tables; and 

a plurality of encrypting rounds, wherein i-th one of said plurality of encrypting rounds 
comprises the XOR means, the fixed tables, the selector, linear transform means L1j(x) and 
linear transform means L2j(x), for that round, and wherein the fixed tables for said plurality of 
respective encrypting rounds are identical, and wherein the linear transform means L1j(x), the 
nonlinear transform means with the masked fixed table S, [x] and the linear transform means 
L2j(x) operate in that round. 

55. (Previously presented) The encryption device according to claim 54, 
characterized in that the linear transform means L1j(x) is defined as L1j(x) = x. 

56. (Previously presented) The encryption device according to claim 54, 
characterized in that the linear transform means L2j(x) is defined as L2|(x) = 
MixedColumn(Shift(x)). 

57. (Previously presented) The encryption device according to claim 54, 
characterized in that the linear transform means L2j(x) is defined as Shift(x). 

58-63. (Cancelled) 

64. (Previously presented) An encryption device comprising a random number 
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generator for generating a random number h, where h is an integer between zero and q-1 , and a 
first plurality of encrypting rounds, wherein 

i-th one of said plurality of encrypting rounds comprises nonlinear transform means for 
nonlinearly transforming an input thereto, and XOR means for XORing a first input thereto with a 
second input thereto for that round, where i is an integer; 

the second input to said XOR means is coupled to an output of said nonlinear transform 
means; and 

said nonlinear transform means comprises: 

q sets of fixed values, where q is an integer equal to three or more, wherein equations, 
FM 0 ,h = C h XOR L1 0 (FMin), C h = c h ,i5Ch f i...c hl 0i and D h = d h| i5dh ( i4...d h ,o, are satisfied, where 
FMj, h is the i-th fixed value of the h-th set of said q sets of fixed values, where j is an integer, 

q sets of fixed values, wherein equations, (c 0 j XOR Ci tj ) v (d j XOR c 2 ,j) v...v (cq- 2J XOR 
cq-g = (111...11) 2 and (d 0J XOR d 1tj ) v (dij XOR d 2J ) v...v (dq- 2J XOR dq- 1tj ) = (111...11) 2 are 
satisfied, a fixed table before masking is defined as S[x], and i-th masked fixed table is defined 
as Sj[x XOR Cjj] XOR d i(j for the j-th fixed value; 

a selector for selecting one of said q sets of fixed values in response to the random 
number h; 

further XOR means for XORing an input thereto with an XOR of a key with said selected 
fixed value; 

linear transform means L1j(x); 

a plurality of nonlinear transform means for nonlinearly transforming an input in 
accordance with a fixed table; 

linear transform means L2j(x), wherein the linear transform means L1j(x), the nonlinear 
transform means with the masked fixed table Sj [x] and the linear transform means L2j(x) operate 
in that round; and 

a selector for selecting one of said plurality of nonlinear transform means. 

65. (Previously presented) The encryption device according to claim 64, 
characterized in that the linear transform means L1j(x) is defined as L1j(x) = x. 

66. (Previously presented) The encryption device according to claim 64, 
characterized in that the linear transform means L2,(x) is defined as L2j(x) = 
MixedColumn(Shift(x)). 

67. (Previously presented) The encryption device according to claim 64, 
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characterized in that the linear transform means L2|(x) is defined as Shift(x). 

68. (Previously presented) An encryption device comprising a random number 
generator for generating a random number h, where h is an integer between zero and q-1 , and a 
first plurality of encrypting rounds, wherein 

i-th one of said plurality of encrypting rounds comprises nonlinear transform means for 
nonlinearly transforming an input thereto, and XOR means for XORing a first input thereto with a 
second input thereto for that round, where i is an integer; 

the second input to said XOR means is coupled to an output of said nonlinear transform 
means; and 

said nonlinear transform means comprises: 

q sets of fixed values, where q is an integer equal to three or more, wherein equations, 
FMi, h = C h XOR L1i(L2i-1(D h )) for C h = c h , 15 Ch t i4...c h , 0 , and D h = d h , 15 dh,i4...d M , are 
satisfied, where FM i)h is the i-th fixed value of the h-th set of said q sets of fixed values, where j is 
an integer, 

q sets of fixed values, wherein equations, (c 0( j XOR Cij) v (ci j XOR c 2 j) v...v (cq- 2J XOR 
cq-u) = (111 ...11) 2 and (d 0J XOR d 1tj ) v (d 1(j XOR d 2j ) v...v (dq- 2J XOR dq-i tj ) = (111 ... 11) 2 are 
satisfied, a fixed table before masking is defined as S[x], and i-th masked fixed table is defined 
as Sj[x XOR Cjj] XOR dg for the j-th fixed value; 

a selector for selecting one of said q sets of fixed values in response to the random 
number h; 

further XOR means for XORing an input thereto with an XOR of a key with said selected 
fixed value; 

linear transform means L1j(x); 

a plurality of nonlinear transform means for nonlinearly transforming an input in 
accordance with a fixed table; 

linear transform means L2j(x), wherein the linear transform means L1j(x), the nonlinear 
transform means with the masked fixed table Sj [x] and the linear transform means L2j(x) operate 
in that round; and 

a selector for selecting one of said plurality of nonlinear transform means. 

69. (Previously presented) The encryption device according to claim 68, 
characterized in that the linear transform means L1 j(x) is defined as L1j(x) = x. 

70. (Previously presented) The encryption device according to claim 68, 
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characterized in that the linear transform means L2j(x) is defined as L2j(x) = 
MixedColumn(Shift(x)). 

71 . (Previously presented) The encryption device according to claim 68, 
characterized in that the linear transform means L2j(x) is defined as Shift(x). 

72. (Currently amended) A program stored on a computer or machine-readable 
storage medium for use in an encryption device, said program operable to effect the steps of: 

selecting one set of q sets of fixed values, where q is an integer equal to three or more, 
in response to a random number h, where h is an integer between zero and q-1 ; 

XORing an input value with an XOR of a key with said selected fixed value in i-th one of 
rounds, wherein equations, FM 0 ,h = C h XOR L1 0 (FMin), C h = c h> i5Ch.i...c ht o, and D h = d ht15 d 
h,i4...d h,o, are satisfied, where FM i|h is the i-th fixed value of the h-th set of said q sets of fixed 
values, where i is an integer and j is an integer; 

selecting one set Sj [x] of q sets of masked fixed tables in response to the random 
number h in that round, wherein equations, (c 0ij XOR c 1( j) v (c 1tj XOR c 2 ,j) v...v (cq- 2ij XOR cq- 1(j ) 
= (111 ... 11) 2 and (d 0J XOR d u ) v (d 1(j XOR d 2J ) v...v (dq- 2ij XOR dq- 1tj ) = (111 ... 11) 2 are satisfied, 
a fixed table before masking is defined as S[x], and i-th masked fixed table is defined as Sj[x 
XOR c i(j ] XOR djj for the j-th fixed value; 

nonlinearly transforming an input value in accordance with said selected set Sj [x] of fixed 
tables in that round; and 

linearly transforming an input value and the nonlinearly transformed value in that round. 
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